Ethereum’s EIP-3074 ‘upgrade’ could let wallet makers steal your money – Protos
With momentum carried over from the relatively smooth hard fork upgrades Shapella (Shanghai+Capella) and Dencun (Deneb+Cancun), Ethereums next hard fork was supposed to be a breeze. Nevertheless, several analysts are waving red flags about one of its code changes, EIP-3074.
Through EIP-3074, Pectra will introduce codes that permit users to delegate all of their Ethereum assets to so-called Invokers externally owned accounts (EOA) that users must trust to not steal their money.
Following the naming convention of star + city portmanteau, the upcoming hard fork Pectra (Electra+Prague) will introduce two new operation codes: AUTH and AUTHCALL. Together, these codes make up Ethereum Improvement Proposal number 3074 (EIP-3074).
The two codes are easy to understand. AUTH delegates power to an Invoker to conduct transactions while AUTHCALL calls that prior authorization to conduct subsequent transactions using that authorization.
Incredibly and for the first time in Ethereums history these two codes allow a third-party entity to send or transact Ethereum assets, including NFTs and ERC-20 tokens like USDC, inside your wallet forever. Unless developers modify the EIP before Ethereum hard forks later this year, the delegated powers remain with the Invoker permanently.
Read more: Ethereum Foundation ditches warrant canary
Although further details of the AUTH and AUTHCALL codes are quite technical, a final item of general importance to most crypto participants is EIP-3074s entrusting of unprecedented powers to wallet makers.
Because Ethereum developers realize the expansive and permanent power of AUTH instructions to the Ethereum Virtual Machine (EVM), they have decided to limit the EOAs to which users may delegate their assets. Specifically, they have proposed limiting EOAs to a whitelist maintained by pre-approved wallet providers like MetaMask.
The solution to this blockchain problem? Trusted third-parties.
ChainArgos CEO Jonathan Reiter explained Invokers newfound powers in EIP-3074 even more explicitly, saying, I delegate authority over my account to an Invoker something that can now call code over my assets and that thing now has the ability to do stuff with my assets. And theres no way to revoke that delegation The problem here is, because you cant revoke it, if I delegate to a contract even if I think that contract is okay today if its upgradeable, they can steal my tokens in the future.
Security researchers and auditors have raised similar concerns. Indeed, its not enough for the user to simply ensure that they delegate only to presently trustworthy EOAs. If those EOAs are upgradeable smart contracts, the owner of those EOAs private keys could swap honest code for malicious code in the future.
Worse, even if an EOA is immutable, if that EOA interacts with additional smart contracts and those third-party smart contracts are upgradeable, EIP-3074 could expose users assets to theft via malicious, third-party code upgrades in the future.
Read more: Blast L2 hack prompts debate over centralization of Ethereum rollups
Given all of these risks, what exactly is the point of EIP-3074 in the first place? Mostly, in the opinion of co-author Matt Garnett, the code will save users time and money assuming Invokers stay honest. Consider a first-timers experience using Uniswap. First they must manually sign to authorize Uniswap. Then they need to pay to activate ETH on Uniswap before signing up and paying gas to activate USDC. Then they sign and pay gas to swap ETH for USDC and if more assets are involved, each one must also be activated with a separate signature and gas fee.
In the post-Pectra hard fork world, many of these signatures and gas payments could consolidate. For the user, they would only sign once to AUTH an Invoker with permission to perpetually trade their ETH or USDC on their behalf without subsequent signatures.
In summary, EIP-3074 adds more trust and power with centralized and already quite powerful corporations like MetaMask by Consensys. Unless developers rethink this software change, the upgrade will entice users to entrust perpetual authority with third-party Invokers. These entities may now control users wallets and might, by way of their own or third-party smart contract upgrades, change the rules of the game in the future to simply steal users money.
Got a tip? Send us an email or ProtonMail. For more informed news, follow us on X, Instagram, Bluesky, and Google News, or subscribe to our YouTube channel.
Original post:
Ethereum's EIP-3074 'upgrade' could let wallet makers steal your money - Protos
- Is Ethereum About to Resume the Uptrend and Break Above $3K? (ETH Price Analysis) - CryptoPotato - May 13th, 2024 [May 13th, 2024]
- Bitcoin, Binance, Ethereum, and Ripple: The biggest crypto news of the past week - Cointribune EN - May 13th, 2024 [May 13th, 2024]
- Can Ethereum (ETH) Holders Succeed in Initiating Recovery? - BeInCrypto - May 13th, 2024 [May 13th, 2024]
- Ethereum (ETH) on Verge of Fall, XRP Death Cross Solidifies, Solana (SOL) Breakout Could Be Fake - U.Today - May 13th, 2024 [May 13th, 2024]
- Ethereum Sell-off Fears Mount as 56,795 ETH Linked to Coinbase - U.Today - May 13th, 2024 [May 13th, 2024]
- Parity Wallet Hacker Moves $9 Million in Ethereum, Leaving $246 Million in Limbo - U.Today - May 13th, 2024 [May 13th, 2024]
- Why is Ethereum (ETH) price down today? - Cointelegraph - May 13th, 2024 [May 13th, 2024]
- Ethereum Bounces Strongly While Stacks Remain In The Red; Rebel Satoshi Sets The Stage For 100x Memecoin Gains - Crypto News Flash - May 13th, 2024 [May 13th, 2024]
- SEC doesn't want Ethereum to transform banking landscape, says Joseph Lubin - Cointelegraph - May 13th, 2024 [May 13th, 2024]
- ARK Invest and 21Shares Remove Staking from Their Ethereum ETF Application - ihodl.com - May 13th, 2024 [May 13th, 2024]
- Can Cardano And Dogecoin Reach $1? This New Ethereum Token Might Get There First - CoinGape - May 13th, 2024 [May 13th, 2024]
- Restaking Is Hot in Ethereum and Entering Solana. Should We Worry? - CoinDesk - May 13th, 2024 [May 13th, 2024]
- Franklin Templeton expects this network to 'remain a leader' on Ethereum - DLNews - May 13th, 2024 [May 13th, 2024]
- Speculation Mounts Over Potential Ethereum ETF Approval Amidst Cryptocurrency Political Maneuvering - TronWeekly - May 13th, 2024 [May 13th, 2024]
- Why the US election will decide the fate of Ethereum ETFs - DLNews - May 13th, 2024 [May 13th, 2024]
- A Deep Dive Into Ethereum Airdrops (ETC Airdrops) In 2024: Chasing Amazing Rainbows Or Unearthing Gems - Blockchain Magazine - May 13th, 2024 [May 13th, 2024]
- Ethereum could experience bullish run, ETH ultrasound money narrative at risk - FXStreet - May 13th, 2024 [May 13th, 2024]
- Bitcoin or Ethereum? We asked ChatGPT which asset is a better buy for summer 2024 - Finbold - Finance in Bold - May 13th, 2024 [May 13th, 2024]
- JP Morgan Analysts Offer Hope Ethereum ETF Despite Regulatory Challenges - Global Crypto - May 13th, 2024 [May 13th, 2024]
- Ethereum ETFs: Here Are All the Applications Awaiting SEC Approval - Decrypt - May 13th, 2024 [May 13th, 2024]
- Ethereum Price Prediction for 2024, 2025, 2030 - Techopedia - May 13th, 2024 [May 13th, 2024]
- Grayscale withdraws its Ethereum futures ETF application - Cointelegraph - May 13th, 2024 [May 13th, 2024]
- Vitalik Buterin proposes EIP-7702 to refine Ethereum account abstraction - The Block - May 13th, 2024 [May 13th, 2024]
- Crypto: Ethereum dethroned by Solana in terms of decentralized exchange volume - Cointribune EN - May 13th, 2024 [May 13th, 2024]
- Vitalik rallies support for temporary smart wallets on Ethereum - Blockworks - May 13th, 2024 [May 13th, 2024]
- Ethereum resume sideways move as Grayscale files to withdraw Ethereum futures ETF application with the SEC - FXStreet - May 13th, 2024 [May 13th, 2024]
- Ethereum Competitor NEAR Protocol Looks Extremely Bullish, Says Analyst Jamie Coutts Here Are His Targets - The Daily Hodl - May 13th, 2024 [May 13th, 2024]
- Bitcoin, Ethereum: Two levels where a swing trade could be profitable - AMBCrypto News - May 13th, 2024 [May 13th, 2024]
- Solana Surges Towards Unseating Ethereum Amid Crypto Rivalry - West Island Blog - May 13th, 2024 [May 13th, 2024]
- SEC delays making a decision on the proposed Invesco Galaxy spot Ethereum ETF - The Block - May 13th, 2024 [May 13th, 2024]
- Ethereum Gas Fees Plunge To Lowest Since 2020: Is This The End Of High Costs? - Bitcoinist - May 11th, 2024 [May 11th, 2024]
- Vitalik Buterin has a new proposal to make Ethereum wallets easier to use but obstacles remain - DLNews - May 11th, 2024 [May 11th, 2024]
- Grayscale will focus energies on spot Ethereum products, CEO says - DLNews - May 11th, 2024 [May 11th, 2024]
- This is Why Ethereum is No Longer a Deflationary Network: CryptoQuant - CryptoPotato - May 11th, 2024 [May 11th, 2024]
- MEV collected by validators is now higher on Solana than on Ethereum - Blockworks - May 11th, 2024 [May 11th, 2024]
- Solana Gains 5%, While Bitcoin and Ethereum Experience Minor Dips - Yahoo Finance - May 11th, 2024 [May 11th, 2024]
- Heres Why Ethereum (ETH) Has Been Lagging Behind Bitcoin (BTC), According to Glassnode - The Daily Hodl - May 11th, 2024 [May 11th, 2024]
- Ripple CTO Reveals MASSIVE Ethereum Mistake That Cost Him Millions - Coinpedia Fintech News - May 11th, 2024 [May 11th, 2024]
- Grayscale fought hard for Bitcoin ETFs. Why it won't bother with Ethereum - DLNews - May 11th, 2024 [May 11th, 2024]
- Ethereum L2 Eclipse CEO Steps Back Amid Sexual Misconduct Allegations - CryptoPotato - May 11th, 2024 [May 11th, 2024]
- Ethereum Gas Fee Hits Four-Year Low After Dencun Upgrade, A Boon or Bane? - CoinGape - May 11th, 2024 [May 11th, 2024]
- Solana (SOL) Ready for $160, Ethereum (ETH) Performance Raises Questions, Will Cardano (ADA) Break This Resistance? - U.Today - May 11th, 2024 [May 11th, 2024]
- Coinbase sees infinite interoperability potential with Ethereum and USDC - Cointelegraph - May 11th, 2024 [May 11th, 2024]
- Bitcoin and Ethereum ETFs in Hong Kong diverge - CryptoSlate - May 11th, 2024 [May 11th, 2024]
- SEC punts Invesco Galaxy spot Ethereum ETF decision to July - Cointelegraph - May 11th, 2024 [May 11th, 2024]
- Popular Crypto Wallet MetaMask Rolls Out 'Smart Transactions' to Combat Ethereum Front-Running - CoinDesk - May 11th, 2024 [May 11th, 2024]
- Bitcoin and Ethereum bounce back after week of brutal losses here's why - DLNews - May 11th, 2024 [May 11th, 2024]
- Ethereum fees hit lows while L2 capture users' attention: IntoTheBlock - Crypto Briefing - May 11th, 2024 [May 11th, 2024]
- Solana could flip Ethereum in transaction fees within a week: Report - Cointelegraph - May 11th, 2024 [May 11th, 2024]
- Consensys Lawsuit Over Ethereum Wont Deter SEC, Former Regulator Says - Decrypt - May 11th, 2024 [May 11th, 2024]
- Proposal for Grayscale's Ethereum Futures Trust ETF has been withdrawn - The Block - May 11th, 2024 [May 11th, 2024]
- Why Ethereum Gas Fees Have Fallen to Their Lowest Level Since 2020 - Unchained - Unchained - May 11th, 2024 [May 11th, 2024]
- Crypto Analyst Says Ethereum Price Will Drop To $2,500, Heres Why - NewsBTC - May 11th, 2024 [May 11th, 2024]
- Trader Says Bitcoin (BTC), Chainlink (LINK) and One Ethereum Rival Setting Up for Rallies - The Daily Hodl - May 11th, 2024 [May 11th, 2024]
- Ethereum price lags due to 'weaker capital rotation,' but crypto macro uptrend remains - Cointelegraph - May 11th, 2024 [May 11th, 2024]
- Ethereum-Based Altcoin Leads Real-World Assets Sector in Development Activity, According to Santiment - The Daily Hodl - May 11th, 2024 [May 11th, 2024]
- Bitcoin and Ethereum Tank as Crypto Liquidations Top $150 Million - Decrypt - May 11th, 2024 [May 11th, 2024]
- Forget The Price Dip: Ethereum Network Activity Hints At Imminent Takeoff - NewsBTC - May 11th, 2024 [May 11th, 2024]
- Bearish Flags Flutter Over Ethereum & This Popular Altcoin as They Could be Poised for a 10% Pullback - Coinpedia Fintech News - May 11th, 2024 [May 11th, 2024]
- Toncoin Spikes on Notcoin Rollout as Bitcoin, Ethereum Trade Flat - Decrypt - May 11th, 2024 [May 11th, 2024]
- ApeCoin Nears All-Time Low as Bored Ape Ethereum NFT Prices Plummet - Decrypt - April 16th, 2024 [April 16th, 2024]
- What is restaking, and how to restake Ethereum to boost rewards? - Cointelegraph - April 16th, 2024 [April 16th, 2024]
- Ethereum price weakens against Bitcoin Here's why - Cointelegraph - April 16th, 2024 [April 16th, 2024]
- Hong Kong Approves Spot Bitcoin and Ethereum Application - Watcher Guru - April 16th, 2024 [April 16th, 2024]
- Massive 10,701 ETH Transfer by Whale to Exchange as Ethereum Price Drops - U.Today - April 16th, 2024 [April 16th, 2024]
- OKX Launches an Ethereum Layer 2 Network | Technologies - ihodl.com - April 16th, 2024 [April 16th, 2024]
- Ethereum (ETH) Price Crash: Whales Dive In as $3,000 Support Falters - U.Today - April 16th, 2024 [April 16th, 2024]
- Ethereum (ETH) Price at Major Risk as Analyst Points to Crucial Support Levels - U.Today - April 16th, 2024 [April 16th, 2024]
- Rollups - Technology for Ethereum The Rolla Daily News - - The Rolla Daily News - April 16th, 2024 [April 16th, 2024]
- Ethereum's next hard fork could make lost private keys a thing of the past - Cointelegraph - April 16th, 2024 [April 16th, 2024]
- Ethereum Falls 10% In Selloff By Investing.com - Investing.com - April 16th, 2024 [April 16th, 2024]
- The Latest in Crypto: A Spotlight on Bitcoin (BTC), Ethereum (ETH), and Furrever Token Today - Yahoo Finance - April 16th, 2024 [April 16th, 2024]
- Hong Kong Approves Spot Ethereum ETFs, But Will They Lure Investors? - FX Leaders - April 16th, 2024 [April 16th, 2024]
- Ethereum Whales Go on a Buying Spree as ETH Price Drops - Blockonomi - April 16th, 2024 [April 16th, 2024]
- OKX's Layer-2 Blockchain X Layer Now Live on Ethereum - Coinspeaker - April 16th, 2024 [April 16th, 2024]
- Hong Kong Pioneers Bitcoin and Ethereum ETFs in the Asian Market - AlexaBlockchain - April 16th, 2024 [April 16th, 2024]
- Why Bitcoin, Ethereum, and Dogecoin Slipped Over the Weekend - Yahoo Finance - April 16th, 2024 [April 16th, 2024]
- OKX's New Ethereum Layer-2: What is X Layer? - BSC NEWS - April 16th, 2024 [April 16th, 2024]
- Ethereum Suffers Most Hacks Among Blockchains in 2024 - Cryptonews - April 16th, 2024 [April 16th, 2024]
- OKX Launches Ethereum Layer 2 on Mainnet - Unchained - Unchained - April 16th, 2024 [April 16th, 2024]
Tags: